VDB

CESS-2024-52284

CESS-2024-52284 PUBLISHED CVSS 7.7 HIGH

Unauthorized disclosure of sensitive data: Any user with `GET` or `LIST` permissions on `BundleDeployment` resources could retrieve Helm values containing credentials or other secrets.

Risk Scores

CVSS 3.1
7.7
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Timeline

  • Sep 2, 2025 CVE Published
Open in Interactive Console →
$ Console Community · 100/wk Open console ›